Authorization - determine what users can and cannot access with each request. Authentication - first, determine who that user is
- User provides a set of credentials to log in through a client application, like a ReactJS interface.
- The client application sends the credentials to an authentication server that validates them.